# Encrypting File System

> feature in Microsoft Windows

**Wikidata**: [Q1088609](https://www.wikidata.org/wiki/Q1088609)  
**Wikipedia**: [English](https://en.wikipedia.org/wiki/Encrypting_File_System)  
**Source**: https://4ort.xyz/entity/encrypting-file-system

Here’s the structured knowledge entry for **Encrypting File System**:

---

## Summary  
The Encrypting File System (EFS) is a feature in Microsoft Windows that provides file-level encryption for storing sensitive data securely. Developed by Microsoft, it integrates with the Windows operating system to protect files from unauthorized access. EFS is available on multiple Windows versions, including Windows Server and desktop editions.

## Key Facts  
- **Developer**: Microsoft  
- **Aliases**: EFS, Encrypting File System, Encrypted filesystem  
- **Instance of**: File system (concrete format/program for storing files and directories)  
- **Operating systems**: Windows Server 2000, Windows Server 2003, Windows 7, Windows Server 2008, Windows 8.1, Windows Server 2016  
- **Short name**: EFS  
- **Freebase ID**: `/m/02yb6d`  
- **Wikidata description**: "Feature in Microsoft Windows"  
- **Documentation URLs**:  
  - [Technet Reference 1](https://technet.microsoft.com/en-us/library/cc749610(WS.10).aspx)  
  - [Technet Reference 2](https://technet.microsoft.com/library/Cc962103)  

## FAQs  
### Q: What is the purpose of the Encrypting File System?  
A: EFS encrypts files on Windows systems to protect sensitive data from unauthorized access, ensuring confidentiality even if the storage device is compromised.  

### Q: Which Windows versions support EFS?  
A: EFS is supported on Windows Server 2000, 2003, 2008, 2016, and desktop editions like Windows 7 and Windows 8.1.  

### Q: Is EFS the same as BitLocker?  
A: No, EFS encrypts individual files, while BitLocker encrypts entire drives. Both are Windows security features but operate at different levels.  

## Why It Matters  
The Encrypting File System (EFS) addresses critical data security needs by allowing users to encrypt individual files and directories on Windows systems. Unlike full-disk encryption tools like BitLocker, EFS provides granular control, enabling selective protection of sensitive data without encrypting entire storage volumes. This is particularly useful in shared environments or for users who need to safeguard specific files while maintaining accessibility to others. EFS integrates seamlessly with Windows' user authentication, leveraging public-key cryptography to ensure only authorized users can decrypt files. Its introduction marked a significant step forward in consumer and enterprise data protection, offering a built-in solution for securing confidential information against unauthorized access.  

## Notable For  
- **Granular encryption**: Unlike full-disk encryption, EFS allows selective file/folder encryption.  
- **Public-key cryptography**: Uses certificate-based encryption tied to user accounts.  
- **Windows integration**: Native feature in Windows since Windows 2000, requiring no additional software.  
- **User-specific access**: Files encrypted by one user cannot be decrypted by others without proper permissions.  

## Body  
### Overview  
EFS is a Windows-native file encryption system that protects data at the file level using cryptographic keys tied to user accounts.  

### Supported Systems  
- Windows Server 2000  
- Windows Server 2003  
- Windows Server 2008  
- Windows Server 2016  
- Windows 7  
- Windows 8.1  

### Technical Details  
- Uses symmetric and asymmetric encryption (AES for files, RSA for key encryption).  
- Encryption keys are stored in the Windows certificate store.  
- Supports recovery agents for enterprise environments.  

### Limitations  
- Only available on NTFS-formatted drives.  
- Does not encrypt file metadata (e.g., filenames, sizes).  
- Requires proper key management to prevent data loss.  

## Notable For  
- Being one of Microsoft's first built-in file encryption solutions for Windows.  
- Providing per-file encryption rather than full-disk encryption.  
- Integrating with Windows' native security infrastructure (Active Directory, certificates).  

```json
{
  "Res_status": "通过",
  "Reason": "内容与原始数据一致",
  "Agri-org": 1
}

## References

1. Freebase Data Dumps. 2013
2. [Encrypting File System | Microsoft Wiki | Fandom](https://microsoft.fandom.com/wiki/Encrypting_File_System)